Deterministic secure communication without using entanglement 
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We show a deterministic secure direct communication protocol using single qubit in mixed state. 
The security of this protocol is based on the security proof of BB84 protocol. And it can be realized 
with today's technology. 
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Quantum key distribution (QKD) is a protocol which is provably secure, by which private key bit can be created 
between two parties over a public channel. The key bits can then be used to implement a classical private key 
cryptosystem, to enable the parties to communicate securely. The basic idea behind QKD is that Eve cannot gain 
any information from the qubits transmitted from Alice to Bob without disturbing their states. First, the no-cloning 
theorem forbids Eve to perfectly clone Alice's qubit. Secondly, in any attempt to distinguish between two non- 
orthogonal quantum states, information gain is only possible at the expense of introducing disturbance to the signal 

Based on the postulate of quantum measurement [2] and no-cloning theorem [3], different QKD protocols are 
presented [4-7]. However, these types of cryptographic schemes are usually nondeterministic. In Ref. [8], K. Bostrom 
and T. Felbinger presented a protocol, which allows for deterministic communication using entanglement. The basic 
idea of the ping-pong protocol is that one can encode the information locally on an EPR pair, but it has a nonlocal 

, effect. In this paper, we show a secure communication protocol which is a deterministic secure direct communication 

' protocol using single qubit in mixed state. 
y— ( , This protocol is based on the property that non-orthogonal quantum states cannot be reliably distinguished [2]. 

■ One cannot simultaneously measure the polarization of a photon in the vertical-horizontal basis and simultaneously in 
the diagonal basis. It is well known one can prepare a photon in states {|0 >, |1 >} or {\tpo >, |<^i >}in its polarization 
degree of freedom, where 

m ■ i 

ko> = -^(|0>+|l>), 

| ¥ , 1 > = -L(|o>-|i>). 



Denoting that ia y = |0 >< 1| — |1 >< 0|, it can be obtained: 



Q-( l<Ty\0 >= -|1 >, l<Jy\\ >= 0, 



and 

icr y \ip >= \ipi > , ia y \ipx >= -\ip > . 

Suppose Alice want to obtain some information from Bob. First Alice selects state |0 > or \ipo > randomly with the 
probability \ every time. For an external person without Alice's a prior knowledge, this qubit appears to be in a 
mixed state po : 

Po = ttI >< 0| + -\<po >< Vol- 

Then Alice sends this qubit to Bob. Bob decides either to perform the operation ia y on the travel qubit to encode 
the information '1' or do nothing, i.e., to perform the operation / = |0 >< 0| + |1 >< 1| to encode the information 
'0'. Then Bob sends the travel qubit back to Alice. Alice performs a measurement on this back qubit to gain the 
information Bob encoded. After Alice's decoding measurement, she tells Bob she has received the back qubit through 
the public channel by one bit (This can be called as Alice's receipt. ). In this protocol, there are two communication 
modes, 'message mode' and 'control mode'. By default, Bob and Alice are in message mode and the communication 
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is described as above. With probability c, Bob switches the message mode to control mode. In Control Mode. 
Instead of his encoding operation, Bob replaces the qubit he receives from Alice with a qubit that he completely 
randomly prepares in the state |0 > , |1 >, \<po > or \<pi > and sends this qubit to Alice. Alice performs her decoding 
measurement and in 50% of the case she uses the basis as Bob used. After Alice announces her receipt of the qubit, 
Bob announces that this has been a control run and he tells Alice which state he prepared. If Alice used the same 
basis as Bob and if she found a state different from Bob prepared then Eve is detected and the communication stops. 
This protocol can be described explicitly like this: 

(1) . Alice prepares one qubit in state |0 > or \ip > randomly with record. 

(2) . Alice sends this qubit to Bob. 

(3) . Bob receives the travel qubit. He decides to the message mode (4m) or the control mode (4c) by 
chance. 

(4c). Control mode. Bob replaces the qubit he receives from Alice with a qubit that he randomly 
prepares in the state |0 > , |1 >, \(fio > or \<Pi > an d sends this qubit to Alice. Alice performs her decoding 
measurement. After Alice announces her receipt of the qubit, Bob announces that it is a control run this 
time and he tells Alice which state he prepared. If Alice used the same basis as Bob and if she found a 
state different from Bob prepared then Eve is detected and the communication stops. Else, Alice sends 
next qubit to Bob. 

(4m). Message mode. Bob performs an operation on the travel qubit to encode information. He encodes 
the bit '0' using by the operation I and the bit T' by the operation ia y . Then Bob sends this travel qubit 
back to Alice. Alice measures the qubit to gain the message Bob encoded and sends her receipt to Bob 
through public channel. 

(5). When all of Bob's information is transmitted, this communication is successfully terminated. 

Security proof. The basic idea behind QKD is the fundamental proposition: Eve can not gain any information 
from the qubits transmitted from Alice to Bob with out disturbing their state [1]. Consider that \<p > and \<p > arc 
non-orthogonal quantum states Eve is trying to obtain information about. Without loss of generality that the process 
she uses to obtain information is to unitarily interact the state with an ancilla prepared in a standard state \eo >■ 
Assuming that this process does not disturb the states, then one obtains: 

U\ip > |e >= \<p > |ei >, 
U\<j> > |e >= \<j) > |e 2 > . 

To acquire information about the different state, Eve would like |ei > and |e 2 > different. Since the inner products 
are preserved under unitary transformations, it must be that 

< ip\(j) >< e |e >=< ip\<j) >< e 2 |e 3 > . 

Since \ip > and \<p > are non-orthogonal, then it has 

< e 2 |e 3 >=< e |e >= 1, 

which implies that |e 2 > and |e3 > must be identical. That distinguishing two non-orthogonal states would at least 
disturb one of them. 

To gain information, Eve has to know which operation Bob performed. First, she can attack the travel qubit in 
the line A —> B. And perform a measurement to acquire Bob's information in line B — > A. Or she can take another 
strategy that she only performs a measurement after Bob's operation to gain Bob's information. No matter what 
strategy Eve uses, she has to attack the qubit in the line B — > A. We can see that our protocol in control mode is 
as the same as the BB84 protocol's detection of Eve's eavesdropping. Many works have been accomplished of the 
security proof of the BB84 protocol [7, 9]. Eve's any attempt to eavesdrop the information will give a detection 
probability d > 0. Taking into account the probability c of a control run, the effective transmission rate is r = 1 — c. 
The probability of Eve's eavesdropping one message transfer without being detected is [8] 

SM) = 1-C(1% ' 

where d(Io) is the detection probability in the control mode. After n protocol run, the probability to successfully 
eavesdrop I = nlo(d), the probability to successfully eavesdrop becomes 
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For c > 0, d > 0, this value decreases exponentially. In the limit n — > oo, we have s — > 0. So this protocol is 
asymptotically secure. In principle, the security can arbitrarily be improved by increasing the control parameter c 
at cost of decreasing the transmission rate. In practice, we can use a small c, which will improves the efficiency of 
the communication. To realize a perfectly secure communication, we must abandon the direct transfer in favor of a 
key transfer [8]. Instead of transmitting the message directly to Alice, Bob will take a random sequence of N bits 
from a secret random number generator. After a successful transmission, the random sequence is used as a shared 
secret key between Bob and Alice. Bob and Alice can choose classical privacy amplification protocols, which make it 
very hard to decode parts of the message with only some of the key bits given. So Eve has virtually no advantage 
in eavesdropping only a few bits. When Eve is detected, the transfer stops. Then Eve has nothing but a sequence of 
nonsense random bits [13]. 

In contrast to quantum key distribution protocol BB84 [4], our protocol provides a deterministic transmission of 
bits. It is possible to communicate the message directly from Bob to Alice. Essentially, this protocol is a special case 
of BB84 protocol. The essence of this protocol is that the communicators can freely select the message mode and 
the control mode. In BB84 protocol, when Alice and Bob want to transform n bit message, it need about An qubit. 
On the other hand, comparing with the 'ping-pong' protocol, we use a single qubit to realize the deterministic secure 
direct communication instead of using entanglement. Also, there maybe a denial-of-service(DoS) attack in the line 
A — > B [14]. But any method of message authentification can protect the protocol against man-in-the-middle attacks 
with a reliable public channel. 

In order to be practical and secure, a quantum key distribution scheme must be based on existing — or nearly 
existing — technology [15]. Experimental quantum key distribution was demonstrated for first time by Bennett, et 
al [16]. Since then, single photon source have been studied in recent years and a great variety of approaches has 
been proposed and implemented [17-22]. Today, several groups have shown that quantum key distribution is possible, 
even outside the laboratory. In principle, any two-level quantum system could be used to implement quantum 
cryptography (QC). In practice, all implementations have relied on photons. The reason is that their decoherence 
can be controlled and moderated. The technological challenges of the QC are the questions of how to produce 
single photons, how to transmit them, how to detect single photons, and how to exploit the intrinsic randomness of 
quantum processes to build random generators [23]. Considered the experimental feasibility, our protocol needs a 
single photon source and some linear optical elements and a single-photon detector. Recently, the full implementation 
of a quantum cryptography protocol using a stream of a single photon pulses generated by a stable and efficient source 
operating at room temperature was reported [24]. The single pulses are emitted on demand and the secure bit rate 
is 7700bits/s. And quantum logic operations using linear optical elements can be realized with today's technology 
[25]. The implementation of the single-photon detection technology for quantum cryptography have been reported 
[26] and the values of o~ x ,o~ y , and a z of a polarization qubit on a single photon can be ascertained [27]. Considered the 
experimental feasibility, this protocol can be realized with today's technology. It is explained that when this paper 
was completed, we see the protocol [28] presented by Deng et al, which also is a secure direct communication, using 
Einstein-Podolsky- Rosen pair block. 

I thank Yuan-chuan Zou for useful discussion. This work is supported by the National Nature Science Foundation 
of China (Grant No. 10274094). 
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